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' Application/Control Number: 09/365,446 
Art Unit: 2132 

DETAILED ACTION 
Specification 

, The abstract of the disclosure Is objected to because "other in the second iine 
shouid be -another or "a dMerent". Also, the process described in the abstract encrypts 
a recipient's algorrthm wfth the recipient's algorithm and sends the cryptogram to the 
recipient; based on the station, the examiner believes that the abstract's process 
should enc W t the transmrtte^s algorithm (computer 100's algorithm, with the recipient's 
algorithm. Correction is required. See MPEP§ 608.01(b). 

2. The lengthy spectotion has not been checked to the extent necessary to 
determine the presence of all possible minor errors. Applicant's cooperation is 
requested in correcting any errors of which applicant may become aware in the 
specification. 

Claim Objections 

3. Claims 5-16, 20, and 22 are objected to because of the following informalities: 
the article before W is "an", not "a". Appropriate correction is required. 

Claims 6 and 7 are objected to because of the following informalities: in the 
fourth line, an V is needed in the middle of "of transmission"; in the eighth line, the" is 
needed before the first recitation of "user; in six only, the nineteenth line needs an 
article after "and". In claim 8, line 22 needs an "an" after "and". Claims 9, 10, 15, and 
16 need "A" at their beginnings. In Calm 15, transmitted" in the second to las. line 
does not make any grammatical sense. I. has been interpreted as though it read, ,ike 
claim 9, transmitting r (see the comment below on this language in claim 9). In claim 
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« an article is needed before .ransmissfcn" in iine 22. Line 18 o, Cairn 20 says , is 
notified the user o, the transmission side", which is grammatical flawed; line 7 o« c,a,m 
2, is similarly incorrect. Claim 22's preamble refer, to "other second encryption 
algorithm"; the best correction would be to repiace "othe, with "a". Also in claim 22, 
phra ses such as "Key . . . operated on the first enc^ion algorithm" (in lines 12 and 16) 
and -signature data written in the . . . encryption Keys" (line 14, are not consistent wtth 
standard grammatical patterns; keys are not "operated on" encryption algorithms; 
encryption keys are not "written in". Appropriate correction is required. 

Double Patenting 

B Applicant is advised that shouid claims 5-10 be found allowable, Cairns 1 1-16 will 
be objected to under 37 CFR 1 .75 as being a substantial duplicate thereof. When two 
claims in an application are duplicates or else are so Cose in content that they both 
cover the same thing, desoKe a slight difference in wording, R is proper after a,low,ng 
one claim to object to the other as being a substantia, duplicate of the allowed claim. 
SeeMPEP§706.03(k). 

Claim Rejections ■ 35 l/SC § If 2 

6 The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

making and using it in ?S„|any Snneoted, to make and use the same and shall 

7 Claim 17 is rejected under 35 U.S.C. 112, firs, paragraph, as failing to comply 
wit b the written description requirement. The claim(s) contains subject matter which 
W as no. described in the specification in such a way as to reasonably convey to one 
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possessionof.hecai.edinvention. Claim 17 mandates that a reception side's 
option algonthm * enc,pted * a —ion side's encryption algonthm and 
s ent,othereceptionside. This is not taugh, by the specification. The examiner has 

1l ^* 1 *«^'•^* fc- - d *■"• ,, " ,h, 

p «--^--^«^* , " d,t,,, *• ,, * 

8 Claim 21 is rejected under 35 U.S.C. 1 12, first paragraph, as failing to compiy 

witht he written description recent. The c,aim<s, contains subiect matter which 
was „otdescnbed,n.hespec*ca, to n in suchawayasto reasonably convey toone 
s «ed in the relevant art tha, the inven,or(s>, at the time the applicafion was filed, had 

option side that communications are disabled when a common algorithm ex,sts 
should read "enabled". 

9 The following is a quotation of the second paragraph of 35 U.S.C. 112: 

10 Cairns 3-14, 16, and 20-22 are reiected under 35 U.S.C. 112, second paragraph, 
matter which applicant regards as the invention. 

„. Claims 3 and 4 recite the lotion "said encrypted encryption algorithm". There 
is insufficient antecedent basis for this limitation in the claim. 
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M . , s8 ,1-14 and20re.er.oanuserofa«ransmis ston side who is 
12 . cams 5-3, 11 14. a ^ ^ rf , 

option side, who MistinCromthe use, ,n*e«o 9 

_ identrier, encryption algorithm and Key a, stored ,n a . 

u . Qn thP user of the transmission side and the gene 

such all of the time. «w second user, 

.„ _ flrs , user the user of the reception side as the secon 
transmission side as the first user, a „ nnri use rs 

« a Dlurality of users including the first and second users, 
and the genenc user as a plurality o ^ 

„ . , . 8 12 .14 recite the limitations "the encryption algonthm opera 

Claims 5-3, 12 14 , gorithm ope rated hy the user o, the 

— — ° n8 : n ; 2. Jereis— ntantecedenthasisforthis 
reception side" in their second clauses. 

,■ mall cases change the leading "the" to an. 

rrrr- — — -•• 

♦ oHpnt basis for this limitation in the claim. Deleting 

— -- 
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claim by labeling this -second signature data . . ." and dubbing the signature date sent 
to the transmission side first signature data 

16 Claim 9 recites the limftation "the encryption algorithm operated by the user of 
the reception side" in lines 8-9. There is insufficient antecedent basis for this limitation 
in the claim. All recitations of the" are inappropriate. Furthermore, once these errors 
have been corrected, the recitation of "a reception side" in line , 1 should be changed to 
,he reception side". Also, in line 1 2, "an" needs to be Ranged to the". In line 14, "it" is 
assumed to refer to the result of the encryption, by the reception side's algorithm, of the 
transmission side's encryption algorithm. The clarity of the claim would be improved by 
Th. user" in line seven being expanded to the user of the transmission side". 

17. Claims 10 and 16 recite the limitation 'the user" in line 13. Three user, have 
already been mentioned in the claim and thus it is unclear to which this recitation refers. 
The examiner assumes that this user is the entity at the transmission side. 

18. Claims 10 and 16 recite the limitation -the obtained idenMier" spanning lines 15 
and 16. Two identfflers have already been mentioned in the claim and thus it is unclear 
,o which this recitation refers. The examiner assumes that "identffier- should be 
pluralized. 

19. Claims 12 and 14 recite the limitation "the encryption key produced based on the 
encryption key operated by the user of the reception side" in lines 19-21 and 22-24 
respectively. There is insufficient antecedent basis for this limitation in the claim. 
Change 'the" to "an - . 
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20. In claim 22, the first clause is unclear because it does not clearly indicate what 
word or words "with a user whose encryption algorithm is to be converted" modifies; is it 
"querying" or "described" or something else? In both cases, using a user to perform 
those actions seems awkward. Should this have read "user identifier? Similarly, "with 
a key" is not distinctly attached to any other phrase. 

21 . Claim 22 recites the limitations "the first and second encryption keys" in line 1 4 
and "the second encryption algorithm" in line 17. There is insufficient antecedent basis 

for these limitations in the claim. 

Claim Rejections - 35 USC § 102 

22. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, PJ^^^ 1 ^* 
of such treaty in the English language. 

23. Claim 1 is rejected under 35 U.S.C. 102(e) as being anticipated by Davis 
(6058478). 

Davis presents a method of updating cryptographic information, including 
algorithms, in remote devices. In claims 5, 6, and 8, the most succinct description of the 
method, an upgrade entity generates an upgrade message (claim 5), encrypts the 
message with the recipient's public key (claim 6), and sends the resulting cryptogram to 
the remote device. The remote device accesses the cryptogram, which anticipates use 
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of an encryption algorithm at the remote device, authenticates the contents, and 
performs the upgrade (claim 5). The upgrade includes deleting a previously existing 
algorithm and modifying that now-deleted algorithm to update the cryptographic 
algorithm. As the update is now the entirety of the now-stored algorithm, it is apparent 
that the now-stored algorithm was sent in the upgrade message. 
24. Claims 20 and 21 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Spies et al. (RE38070). 

From line 43 of column 15 through line 17 of column 16, Spies et al. detail the 
selection of an encryption algorithm for use between two entities. This process includes 
obtaining the identities of the originating and receiving participants, as embodied in their 
encryption indices. The originating entity arrives at these values internally, and hence 
they come from the transmission (originating) side. The sum of these indices is shown 
in Table 1 , which reads on applicant's database. The table shows a correspondence 
between a participant and encryption algorithms available to that entity, thereby 
anticipating the second clause of claim 20. Spies et al. say that the parties are trying to 
agree on an encryption algorithm, and hence the determination step is anticipated. The 
implication that the originating party encrypts data indicates that notification is given that 
a suitable algorithm exists. With respect to claim 21 , the originating participant selects 
an algorithm and hence information indicating the encryption algorithm has been 
transmitted to the sender, albeit internally. Reception of a decryptable message 
constitutes notification at the receiving participant of enabled communications. 
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Claim Rejections - 35 USC § 103 

25. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A Datent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

26. Claim 2-6, 9-1 2, 15-19, and 22 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Spies et al. in view of Davis. 

Spies et al. present a system for encryption algorithm negotiation. A potential 
sender compares a list of the algorithms supported internally with a list of those 
supported by the intended recipient. They do not, however, plan a course of action for 
when different algorithms are used at the sending and receiving sides. Davis presents 
a method of upgrading encryption parameters in remote entities (see for example claims 
5, 6, and 8). His scheme includes an upgrade entity encrypting encryption algorithms 
under an algorithm operable by the recipient of the encrypted algorithm, thereby 
upgrading the algorithm while ensuring the security of the algorithm. He also shows, in 
figure 3, a communication system between two entities where a third trusted party 
facilitates trust between the two entities. Therefore it would have been obvious to a 
person of ordinary skill in the art at the time the invention was made to incorporate 
Davis' algorithm update system into Spies et al.'s algorithm selection system. As both 
Spies et al. and Davis indicate, algorithm use is restricted by the locales of both sender 
and receiver, and hence it is obvious that the upgrade entity of Davis would need to 
know the identities of both the sender and the receiver. The sender is the only entity 
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that can be relied upon to know both of these identities. The joint method includes 
either the sender or receiver getting the updated algorithm; as such, both claims 2 and 
18 are rendered obvious. Claim 17 is broader than claim 18, and hence is also 
rendered obvious. 

Davis' fifth claim teaches including signatures within the cryptogram, thus 
obviating claims 3 and 19. With respect to claim 4, Davis' figure 3, which shows 
communications flowing from the trusted entity through the sender to the receiver, 
renders sending the signature with the encrypted algorithm to the sender and then to 
the receiver obvious. 

Regarding claims 5 and 1 1 , the combination of Spies et al. and Davis has 
already been shown to render obvious receiving the identities of the sender and the 
receiver from the sender. Spies et al. show a table that reads on applicant's data base. 
Davis' demonstration of encrypting an algorithm with an algorithm operable by the entity 
that receives the encrypted algorithm meets the limitations of the last clause of claims 5 
and 11. 

With respect to claims 6 and 12, which place, in the cryptogram, a key that is 
based on the update algorithm and an original key assigned to the cryptogram's 
recipient, Davis talks about altering cryptographic keys in lines 18-25 of column 2. As 
described in lines 56-65 of column 1 , key length is one possible modification. Thus it is 
obvious to include in the modification instructions a key that is based on an original key 
as well as the update algorithm. This key, in unaltered state, is stored in the table. 
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In regards to claims 9, 10, 15, and 16, the upgrade entity in Davis corresponds to 
applicant's encryption key management station. Spies et al. have also mentioned that a 
mutually trusted party holds the table used to select encryption algorithms (column 15, 
lines 57-59). Other aspects of these four claims have already been discussed. As far 
as they are understood, the limitations of claim 22 are met by the preceding paragraphs. 

Allowable Subject Matter 

27. Claims 7, 8, 13, and 14 would be allowed were it not for the 1 12 issues under 
which they are rejected. 

28. The following is a statement of reasons for the indication of allowable subject 
matter: the claims are allowable over the prior art because they mandate that 
signatures based on their respective keys be sent to both the sender and the recipient. 
When combined with the other features of the claims, this signature dispersal renders 
the claims non-obvious. 

Conclusion 

29. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Lincke et al. (6590588) ; Richards et al. (6230267) ; Yaker 
(6230186); Yu et al. (6182076); Carney (6181814/5781654) - claim 18/19; Diffie et al. 
(Re. 36946); Borza (6076167) - figure 5; Kirby et al. (5898784) - abstract; Anderson et 
al. (5857025) - lines 37-40 of column 2; Ross, Jr. (5812671) - figure 1 and lines 61-64 
of column 1 ; Talbot et al. (5679984) - paragraph spanning columns 3 and 4; Elgamal et 
al. (5657390) - lines 4-40 of column 7 and lines 12-17 of column 20; Miura (5509072) - 
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abstract; Ohno (5355413) - figures 14 and 15 as well as lines 23-45 of column 8; 
Wilson (51 85796) - abstract; and Wiedemer (51 55680). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Douglas J. Meislahn whose telephone number is (703) 
305-1338. The examiner can normally be reached on between 9 AM and 6 PM, 
Monday through Thursday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone 
numbers for the organization where this application or proceeding is assigned are (703) 
746-7239 for regular communications and (703) 746-7238 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
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